1779975 - Crash in [@ nsAccessibilityService::GetMarkupMapInfoFor]

Status: RESOLVED FIXED

(Core :: Disability Access APIs, defect)

Description

[Gabriele Svelto [:gsvelto] (PTO)]

Crash report: https://crash-stats.mozilla.org/report/index/d828182d-693d-4267-81cf-502ed0220716

Reason: SIGSEGV / SEGV_MAPERR

Top 10 frames of crashing thread:

0 libxul.so nsAccessibilityService::GetMarkupMapInfoFor const accessible/base/nsAccessibilityService.h:388
1 libxul.so mozilla::a11y::nsAccUtils::SetLiveContainerAttributes accessible/base/nsAccUtils.cpp:92
2 libxul.so mozilla::a11y::AccessibleWrap::HandleAccEvent accessible/android/AccessibleWrap.cpp:123
3 libxul.so mozilla::a11y::DocAccessibleWrap::HandleAccEvent accessible/android/DocAccessibleWrap.cpp:82
4 libxul.so nsEventShell::FireEvent accessible/base/nsEventShell.cpp:54
5 libxul.so mozilla::a11y::NotificationController::WillRefresh accessible/base/NotificationController.cpp:931
6 libxul.so nsRefreshDriver::Tick layout/base/nsRefreshDriver.cpp:2496
7 libxul.so mozilla::RefreshDriverTimer::TickRefreshDrivers layout/base/nsRefreshDriver.cpp:353
8 libxul.so mozilla::RefreshDriverTimer::Tick layout/base/nsRefreshDriver.cpp:369
9 libxul.so mozilla::VsyncRefreshDriverTimer::TickRefreshDriver layout/base/nsRefreshDriver.cpp:810

This appears to be a NULL pointer access and it's affecting Android alone for the time being.

Comment 1

[Gabriele Svelto [:gsvelto] (PTO)]

The crash was found via clouseau

Comment 2

[BugBot [:suhaib / :marco/ :calixte]]

Set release status flags based on info from the regressing bug 1757121

Comment 3

[James Teh [:Jamie]]

Attachment: Bug 1779975: Check whether a LocalAccessible has its own content before trying to get MarkupMapInfo from it.

Comment 4

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/4ed77b0692cc
Check whether a LocalAccessible has its own content before trying to get MarkupMapInfo from it. r=eeejay

Comment 5

[Cristian Tuns]

https://hg.mozilla.org/mozilla-central/rev/4ed77b0692cc